I’ve recently started learning SailPoint IIQ and could use some guidance.
I have installed SailPoint version 8.5, and it’s already integrated with both OrangeHRM and Active Directory.
My goal is to automatically create user accounts in Active Directory based on employee data from OrangeHRM.
I’ve successfully aggregated data from OrangeHRM using the “Aggregate OrangeHRM” task, and I can see the employee records in SailPoint.
What should I do next to ensure these employee records are provisioned as users in Active Directory?
Any advice or best practices would be greatly appreciated.
Add an Assignment Rule in that business that rule that matches your criteria or attribute that matches with the identity attribute that you are populating with the value of orangeHRM.
ex- if userType is employee.
Once added. create an IT role that gives group of Active Directory and assign this IT role to the business role that you have just created in previous step.
Once all these three steps are done. Run a refresh with Refresh assigned and detected role option and Provision assignments option selected.
Check the user and see it has role or application or not.
In Active Directory, by default they will provide Create Account provisioning policy. You need to add field value rule to map the correct values at the time of provisioning.
If you do not edit then it will generate a work item to fill the details.
So, better to add the Value settings for mandatory variables like CN and password , etc.
I’ve successfully performed the Joiner process to Active Directory — the user account was created successfully by defining a rule in the Provisioning Policies.
Now, I’d like to know:
How can I handle updates to existing users when their data changes, for example, when an employee’s position is updated?
I want the user’s information in Active Directory to be updated automatically without creating a new user account.
Is that possible? If so, how can I configure it?
Hi @benutop55 if the solutions provided by @msingh900 worked could you please mark it as resolved/solution so it can be helpful for the others who are searching for the same or similar questions :).